GPG and encrypt-key
Use of GPG and encrypt-key may lead to inaccessible backup if the keys are revoked.
(Not sure whether this is actually used for the moment, but GPG balked out with an error message that indicates something is wrong, and encryption has worked flawlessly before.)
Suggestion
At least add some toggle whether traditional encryption should be used, or the keys provided through encrypt-key.